gws-sheets
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a command-line tool named
gwsto interact with Google Sheets API resources. It provides instructions for executing methods likebatchUpdate,create, andgetvia shell commands. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves reading and processing data from external spreadsheets. This creates a surface for indirect prompt injection, where content within a spreadsheet could contain malicious instructions intended to manipulate the agent's logic during processing.
Audit Metadata